summaryrefslogtreecommitdiff
path: root/usr.bin/ssh
AgeCommit message (Collapse)Author
2001-12-27get rid of packet_integrity_check, use packet_done() instead.Markus Friedl
2001-12-27auth_rhosts_rsa now accept generic keys.Markus Friedl
2001-12-27always use BN_clear_free instead of BN_freeMarkus Friedl
2001-12-27missing includeMarkus Friedl
2001-12-27clarify -p; ok markus@Kevin Steves
2001-12-27call fatal() for openssl allocation failuresMarkus Friedl
2001-12-27-t is only needed for key generation (unbreaks -i, -e, etc).Markus Friedl
2001-12-25be more carefull on allocationMarkus Friedl
2001-12-25be more careful on allocationMarkus Friedl
2001-12-24try all listed keys.. how did this get broken?Theo de Raadt
2001-12-21remove ifdef for USE_PIPES since fdin != fdout; ok djm@Markus Friedl
2001-12-21Try all standard key files (id_rsa, id_dsa, identity) when invoked withDamien Miller
no arguments; ok markus@
2001-12-21Avoid interruptable passphrase read; ok markus@Damien Miller
2001-12-21Remove default (rsa1) key type; ok markus@Damien Miller
2001-12-20Conformance fix: we should send failing packet sequence number whenDamien Miller
responding with a SSH_MSG_UNIMPLEMENTED message. Spotted by yakk@yakk.dot.net; ok markus@
2001-12-20setup x11 listen socket for just one connect if the client requests so.Markus Friedl
(v2 only, but the openssh client does not support this feature).
2001-12-19change the buffer/packet interface to use void* vs. char*; ok markus@Kevin Steves
2001-12-19fix race between SIGCHLD and select with an additional pipe. writingMarkus Friedl
to the pipe on SIGCHLD wakes up select(). using pselect() is not portable and siglongjmp() ugly. W. R. Stevens suggests similar solution. initial idea by pmenage@ensim.com; ok deraadt@, djm@
2001-12-19handle utsname.nodename case for FamilyLocal X authorization; ok markus@Kevin Steves
2001-12-19basic KNF done while i was looking for something elseTheo de Raadt
2001-12-18log fingerprint on successful public key authentication, simplify usage of ↵Jakob Schlyter
key structs; ok markus@
2001-12-18log fingerprint on successful public key authentication; ok markus@Jakob Schlyter
2001-12-18remove auth_rsa_read_key, make hostfile_ready_key non static; ok markus@Jakob Schlyter
2001-12-10check that server supports v1 for -t rsa1, report from wirth@dfki.deMarkus Friedl
2001-12-10possible fd leak on error; ok markus@Kevin Steves
2001-12-09add auth2_challenge_stop(), simplifies cleanup of kbd-int sessions,Markus Friedl
fixes memleak.
2001-12-08use only one path to X11 UNIX domain socket vs. an array of pathsKevin Steves
to try. report from djast@cs.toronto.edu. ok markus@
2001-12-06disable nagle for X11 fake server and client TCPs. from netbsd.Kevin Steves
ok markus@
2001-12-06strncpy->strlcpy. remaining strncpy's are necessary. ok markus@Kevin Steves
2001-12-06shutdown(sock, SHUT_RDWR) not needed here; ok markus@Kevin Steves
2001-12-06add -o to sshd, too. ok deraadt@Markus Friedl
2001-12-05make theo and djm happy: bye bye regexpMarkus Friedl
2001-12-05post 3.0.2Markus Friedl
2001-12-05minor KNFTheo de Raadt
2001-12-05make it compile with more strict prototype checkingJun-ichiro itojun Hagino
2001-12-05deal with LP64 printf issue with sig_atomic_t. from thorpejJun-ichiro itojun Hagino
2001-12-02zap };Theo de Raadt
2001-12-01don't pass user defined variables to /usr/bin/loginMarkus Friedl
2001-11-30sscanf() length dependencies are clearer now; can also shrink protoKevin Steves
and data if desired, but i have not done that. ok markus@
2001-11-29fix protocol error: send 'failed' message instead of a 2nd challengeMarkus Friedl
(happens if the same key is in authorized_keys twice). reported Ralf_Meister@genua.de; ok djm@
2001-11-29sshd X11 fake server will now listen on localhost by default:Kevin Steves
$ echo $DISPLAY localhost:12.0 $ netstat -an|grep 6012 tcp 0 0 127.0.0.1.6012 *.* LISTEN tcp6 0 0 ::1.6012 *.* LISTEN sshd_config gatewayports=yes can be used to revert back to the old behavior. will control this with another option later. ok markus@
2001-11-29remove dead function prototype; ok markus@Kevin Steves
2001-11-22volatile sig_atomic_tMarkus Friedl
2001-11-22don't use "\n" in fatal()Kevin Steves
2001-11-21more on passphrase construction; ok markus@Kevin Steves
2001-11-21mem leakMarkus Friedl
2001-11-19kill more registersMike Pechkin
millert@ ok
2001-11-19clarify/state that private keys are not exposed to clients using the agent;Kevin Steves
ok markus@
2001-11-19fd leak on HUP; ok stevesk@Markus Friedl
2001-11-17enum/int type cleanup where it made sense to do so; ok markus@Kevin Steves